CVE-2026-124496

The Apache Storm DRPC HTTP endpoint contains a vulnerability where an authenticated client can act as another user by bypassing the configured impersonation authorizer . This allows an authenticated user to execute DRPC functions restricted to different users. To remediate this issue, users are r...

CVE-2026-124496 Apache Storm: DRPC HTTP doAsUser bypasses the impersonation authorizer

The DRPC HTTP endpoint lets an authenticated client act as another user without applying the configured impersonation authorizer. An authenticated user can execute DRPC functions that are restricted to another user. Users are recommended to upgrade to version 3.2.0, which fixes the issue...

kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update

A flaw was found in the libceph component of the Linux kernel. During an authorizer update, if the authorizer is rebuilt, a stale pointer to a freed memory region can be retained. A remote attacker could exploit this by triggering a specific network reconnection, leading to a use-after-free...

CVE-2026-124496: Apache Software Foundation Apache Storm: The DRPC HTTP endpoint lets an authenticated client act as another user without applying the configured impersonation…

The DRPC HTTP endpoint lets an authenticated client act as another user without applying the configured impersonation authorizer. An authenticated user can execute DRPC functions that are restricted to another user. Users are recommended to upgrade to version 3.2.0, which fixes the issue...

PT-2026-145193

The DRPC HTTP endpoint lets an authenticated client act as another user without applying the configured impersonation authorizer. An authenticated user can execute DRPC functions that are restricted to another user. Users are recommended to upgrade to version 3.2.0, which fixes the issue...

CVE-2026-103752-Authorizer-Privilege-Escalation

This repository does not have a README...

CVE-2026-81294

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-81294 Write-up: https://abraxaslabs.tech/research/CVE-2026-81294 CVE-2026-81294 Authorizer 3.15.1 - Paul Ryan I am @abraxasnull. Loopback lab. The client is CVE-2026-81294-Abraxas-Labs.py. Unverified email is...

CVE-2026-123196

A flaw was found in Authorizer. This vulnerability allows an unauthenticated remote attacker to conduct password reset poisoning by providing manipulated metadata headers, such as x-authorizer-url, through the gRPC or REST interfaces. As a result, the application generates password reset and logi...

CVE-2026-123196

Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to control emailed link hosts by supplying x-authorizer-url gRPC metadata. Attackers can send this metadata to the gRPC port or a Grpc-Metadata-X-Authorizer-Url header through the REST...

CVE-2026-123196 Authorizer before 2.4.2 Password Reset Poisoning via x-authorizer-url gRPC metadata

Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to control emailed link hosts by supplying x-authorizer-url gRPC metadata. Attackers can send this metadata to the gRPC port or a Grpc-Metadata-X-Authorizer-Url header through the REST...

CVE-2026-123196 Authorizer before 2.4.2 Password Reset Poisoning via x-authorizer-url gRPC metadata

Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to control emailed link hosts by supplying x-authorizer-url gRPC metadata. Attackers can send this metadata to the gRPC port or a Grpc-Metadata-X-Authorizer-Url header through the REST...

CVE-2026-123196

The Authorizer software prior to version 2.4.2 is vulnerable to a password reset poisoning vulnerability (CWE-640). This flaw allows unauthenticated attackers to manipulate the host of emailed links by supplying the x-authorizer-url gRPC metadata. Attackers can deliver this metadata via the gRPC ...

EUVD-2026-117641

Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to control emailed link hosts by supplying x-authorizer-url gRPC metadata. Attackers can send this metadata to the gRPC port or a Grpc-Metadata-X-Authorizer-Url header through the REST...

Authorizer authorization issue vulnerability

Versions of Authorizer prior to 2.4.2 contain an authorization vulnerability stemming from a password reset poisoning flaw. Attackers can exploit this by providing x-authorizer-url gRPC metadata to control email link hosts; they can send the metadata via the gRPC port or via the...

FreeBSD : sqlite3 -- multiple vulnerabilities (84cd82e1-d49f-11f1-bae2-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 84cd82e1-d49f-11f1-bae2-3497f65b111b advisory. VulnCheck reports: Ten vulnerabilities fixed in SQLite 3.54.0 were published on 2026-10-30. Fo...

CVE-2026-118952

A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a different type, or fail to check a broader matching rule when prefixes overlap. Depending on the ACL configuration, this may allow an authenticated Kafka client to access a resource...

CVE-2026-118952

A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a different type, or fail to check a broader matching rule when prefixes overlap. Depending on the ACL configuration, this may allow an authenticated Kafka client to access a resource...

CVE-2026-118952 Kroxylicious-authorizer-acl: kroxylicious: acl prefix matching can bypass authorization rules

A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a different type, or fail to check a broader matching rule when prefixes overlap. Depending on the ACL configuration, this may allow an authenticated Kafka client to access a resource...

CVE-2026-118952

A flaw in the Kroxylicious ACL authorizer prefix-matching logic may cause it to apply rules to principals of different types or skip broader matching rules when prefixes overlap. This vulnerability could allow an authenticated Kafka client to access unauthorized resources, such as reading a restr...

EUVD-2026-113733

A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a different type, or fail to check a broader matching rule when prefixes overlap. Depending on the ACL configuration, this may allow an authenticated Kafka client to access a resource...